That I agree on. I just hate to see people think RISC-V is going to save them from government back doors simply because it's open-source. A false sense of security is worse than knowing (or strongly suspecting) that you're on compromised hardware and acting accordingly.